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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )M Responsive to communication(s) filed on 18 September 2006 . 
2a)KI This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1, 453 O.G. 213. 

Disposition of Claims 

4) E3 Claim(s) 1-35 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) S Claim(s) 7-35 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
11 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

Prel im . Amd t/Amendmen t 

1. Receipt is acknowledged of the Amendment filed 09/18/2006. 

Claim Rejections - 35 USC §103 

2. The following is a quotation of 35 U.S.C. 103(a) which 
forms the basis for all obviousness rejections set forth in this 
Office action: 

(a) A patent may not be obtained though the invention is not identically 
disclosed or described as set forth in section 102 of this title, if the 
differences between the subject matter sought to be patented and the prior 
art are such that the subject matter as a whole would have been obvious at 
the time the invention was made to a person having ordinary skill in the 
art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

3. Claims 1-6 and 9-10 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Bohnert et al (US 5,797,470) in view of 
Ashton (US 20040012567 Al) . 

Re claims 1-6 and 9-10, Bohnert et al discloses a fuel 
dispensing system (fig. 1; col. 3, lines 62 + ) comprising a fuel 
dispenser [14a, 14b, 14c, 20a, 20b, 20c] ; a control system 24 
which is a site controller operatively associated with a 
plurality of fuel dispensers (fig. 2; col. 5, lines 38 + ); an 
indicia entry device 51 allowing a customer to input a 
verification indicia; and an encrypting module 59 serves as a 
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security module enabling a card reader 53 which is a smart card 
reader or a magnetic card reader to receive the encrypted 
verification indicia (figs. 4&7; col. 6, lines 15-25 and lines 
53-63) . 

Bohnert et al is silent with respect to the card reader 
encrypt account number received from a customer's card and the 
security module decrypt the account number received from the 
card reader. 

Ashton teaches a credit card number is read using the 
credit card reader and the resulting data is optionally 
encrypted before transfer from the mouse to a computer 
(paragraph [0026] ) and circuit 270 includes circuitry and/or 
program instructions for decryption, encryption, or data 
comparison (paragraph [0032] ) . 

It would have been obvious to an artisan of ordinary skill 
in the art at the time the invention was made to incorporate the 
encryption logic of Ashton into the system as taught by Bohnert 
et al in order to provide with a more security system wherein 
both the account information, and the PIN are encrypted 
preventing the information from being manipulated during 
processing, thus preventing fraudulent use. 

4. Claims 11, 12, 14-17 and 19-22 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Bohnert et al as 
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modified by Ashton as applied to claim 1 above, and further in 
view of Johnson et al (US 5,384,850 - cited by the applicant). 
The teachings of Bohnert et al as modified by Ashton have been 
discussed above. 

Re claims 11, 12, 14-17 and 19-22: Bohnert et al as 
modified by Ashton have been discussed above and a payment card 
interface separate from the communications interface for 
receiving encrypted customer verification information an - 
providing a transaction authorization signal (fig. 2; col. 2, 
line 62 through col. 3, line 34), but fails to expressly 
disclose or fairly suggest that a security module associated 
with the control system providing encryption key information to 
the indicia entry device and the card reader, wherein the 
encryption key information is used by the indicia entry device 
to encrypt the input verification indicia and by the card reader 
to decrypt the encrypted verification indicia. 

Johnson et al teaches the above limitation with a security 
module 2 providing encrypted information to decrypt the 
encrypted verification indicia (col. 8, line 5 through col. 13, 
line 30) . 

It would have been obvious to an artisan of ordinary skill 
in the art at the time the invention was made to incorporate the 
teachings of Johnson et al into the teachings of Bohnert et 
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al/Ashton in order to provide Bohnert et al/Ashton with a more 
security and accurate system via a security module, which can 
provide encrypted information to decrypt the encrypted 
verification. Furthermore, such modification would have 

provided Bohnert et al/Ashton with a more user- friendly system 
wherein the user does not have to be concerned with fraudulent 
use of the card event. Accordingly, such modification would 
have been an obvious extension as taught by Bohnert et 
al/Ashton, well within ordinary skill in the art, and therefore 
an obvious expedient . 

5. Claims 8, 18, 25-26 and 28-29 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Bohnert et al as 
modified by Ashton and Johnson et al as applied to claims 1, 14 
and 26 above, and further in view of Coppola et al (US 6360138 
Bl) . The teachings of Bohnert et al as modified by Johnson et 
al have been discussed above. 

Re claims 8, 18, 25-26 and 28-29: Ashton further discloses 
the indicia entry device 25 and the card reader are each housed 
with a separate enclosure (fig. 2) . However, Bohnert et al as 
modified by Ashton and Johnson et al have been discussed above, 
but fails to teach or fairly suggest that each is enclosed 
within a tamper- resistant housing. 
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Coppola et al teaches a fuel dispensing terminal comprising 
a card reader 96, a display 90 and a keypad 94 preferably 
includes a tamper resistant security module (TRSM) , such as 
security module 34, which provides for encryption of PINs prior 
to delivery to the DM 70 (col. 7, lines 48-58) . 

It would have been obvious to an artisan of ordinary skill 
in the art at the time the invention was made to incorporate the 
teachings of Coppola et al into the teachings of Bohnert et 
al/Ashton/ Johnson et al in order to provide Bohnert et 
al/Asht on/ Johnson et al with a more security system, wherein the 
system will not operate its functions if the card reader module 
being harmed. Furthermore, such modification would have been an 
obvious extension as taught by Bohnert et al/Ashton/ Johnson et 
al, well within ordinary skill in the art, and therefore an 
obvious expedient . 

6. Claims 13 and 27 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Bohnert et al as modified by Ashton and 
Johnson et al as applied to claim 1 above, and further in view 
of Schneier (Applied Cryptography, pp. 518-522 - cited by the 
applicant) . The teachings of Bohnert et al as modified by 
Ashton/ Johnson et al have been discussed above. 

Re claims 13 and 27: Bohnert et al/Ashton/ Johnson et al 
have been discussed above but fails to expressly disclose or 
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fairly suggest that the security module provides the encryption 
key information to the indicia entry device and the card reader 
using an encryption key exchange (herein after EKE) . 

Schneier teaches the above limitation with the uses and 
benefits of using an encryption key exchange (p. 518, line 5 
through p. 522, line 11) . 

It would have been obvious to an artisan of ordinary skill 
in the art at the time the invention was made to incorporate the 
teachings of Schneier into the teachings of Bohnert et 
al/Asht on/ Johnson et al due to EKE's high security (i.e., using 
both symmetric and public-key cryptography) in networking 
communication. Furthermore, such modification would have 

provided Bohnert et al/Ashton/ Johnson et al with a more security 
system, and thus a more user- friendly system via its privacy 
protection. Accordingly, such modification would have been an 
obvious extension as taught by Bohnert et al/Asht on/ Johnson et 
al with a diverse system wherein EKE can be implemented with a 
variety of public-key algorithms, well within ordinary skill in 
the art, and therefore an obvious expedient. 

7. Claims 7 and 23-24 are rejected under 35 U.S..C. 103(a) as 
being unpatentable over Bohnert et al as modified by Ashton and 
Johnson et al as applied to claims 1 and 19 above, and further 
in view of Campbell (US 4259720 A) . The teachings of Bohnert et 
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al as modified by Ashton and Johnson et al have been discussed 
above . 

Re claims 7 and 23-24: Bohnert et al as modified by Ashton 
and Johnson et al has been discussed above but is silent with 
respect to re-encrypting step prior to sending the account 
information to an authorization network. 

Campbell teaches a security transaction system comprising 
when a transaction request originated at a terminal 10, 12, or 
14 associated with data processing unit 16 is determined to 
correspond to an account which is maintained by an institution 
associated with data processing unit 24, the secret code number 
entered by the customer at the terminal is re-encrypted by 
security module 20' and transmitted by communication line 23 
along with other transaction message portions, which are 
unencrypted, to data processing unit 24, which is associated 
with the bank with which the customer maintains an account (fig. 
3 ; col . 7, line 24-59) . 

It would have been obvious to an artisan of ordinary skill 
in the art at the time the invention was made to incorporate the 
re-encrypting step of Campbell into the system as taught by 
Bohnert et al /Ashton/ Johnson et al in order to provide Bohnert 
et al /Ashton/ Johnson et al with a more security and more 
universal system which can be utilized with accounts from 
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different banks, and each individual bank have a unique 
encrypting technique/method, thus preventing information from 
being stolen during transmitting through the network. 

Response to Arguments 

8. Applicant's arguments filed 09/18/2006 have been fully 
considered but they are not persuasive. 

In response to the Applicant's argument to "... neither reference 
includes a security module as claimed, neither can possibly 
teach receiving an account number at a security module from a 
card reader or a security module that decrypts an account number 
received from the card reader as required by claim 1..." (page 3, 
4 th paragraph) , the Examiner respectfully request the Applicant 
to further review Bohnert et al wherein the encryption module 59 
serves as a security module for encrypting the number entered by 
the user and Ashton wherein the circuit 270 serves as a security 
module includes circuitry and/or program instructions for 
decryption, encryption, or data comparison the account number. 
Furthermore, any encrypting/decrypting module would be able to 
encrypt/decrypt any received information/data (i.e., personal 
identification number or account number , etc.). Accordingly, 
the claimed limitation, given the broadest reasonable 
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interpretation, Bohnert et al in view of Ashton meets the 
claimed invention (see the rejection above) . 

Conclusion 

9. THIS ACTION IS MADE FINAL. Applicant is reminded of the 
extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action 
is set to expire THREE MONTHS from the mailing date of this 
action. In the event a first reply is filed within TWO MONTHS 
of the mailing date of this final action and the advisory action 
is not mailed until after the end of the THREE-MONTH shortened 
statutory period, then the shortened statutory period will 
expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated 
from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than 
SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to Uyen-Chau 
N. Le whose telephone . number is 571-272-2397. The examiner can 
normally be reached on maxi-flex. 

If attempts to reach the examiner by telephone are 
unsuccessful, the examiner's supervisor, Michael G. Lee can be 
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reached on 571-272-2398. 



The fax phone number for the 



organization where this application or proceeding is assigned is 
571-273-8300 . 

Information regarding the status of an application may be 
obtained from the Patent Application Information Retrieval 
(PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, 
see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free) . If you would 
like assistance from. a USPTO Customer Service Representative or 
access to the automated information system, call 800-786-9199 
(IN USA OR CANADA) or 571-272-1000. 




Uyen-Chau N. Le 
Primary Examiner 
Art Unit 2876 



November 27, 2 006 



